272029db44302f16e4b399ac3d144760b8fc0046b1ad51f9e140eee71269edce

Sharing

Copy URL Twitter E-mail

General

Target
Solara.Dir.zip
Size 12.2MB
Sample260709-qqz4msbv2m
SHA256 272029db44302f16e4b399ac3d144760b8fc0046b1ad51f9e140eee71269edce
MD5 5342f82b5152efe5eb058bfc5f7ccc09
SHA1 97d113c4df588de915834632ccaed82d74205f56
SHA512 819e7fa5f58bf928995b81abd8fc2f591f069a255d8d66d1bf2e4f0b97cfa0baa82000bdcd901074e2d8d8923b9277458243929a7d6730a880027243fa4ff7de
SSDEEP 393216:FyKYR5MargAmY0+4iaeTIwuewDaD/sYtLxyS6J0v:XYMdFiakjuem8/FtLxySw0v
TLSH
T13ED633A3D5B81906CF4EF53F36CFCB09A95AA68E1540E8021BCD53867E5B0D481FA6CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Solara/Monaco/fileaccess/node_modules/qs/lib/utils.js
- Size 6KB
- SHA256 1a360b096b61cb5d5260e6543ed032677d7dcadb0bcf9ba5c42833ca75622e9b
- MD5 37d7f5eda99a09f6169ddb31b0800519
- SHA1 8695a4b17cbb4204cea789012e2426aaaf9489f2
- SHA512 8a26ed9530378195313729054cb8b063b496b61769a96ae50339349ad46019c8186c5f6426fc2ec8184d22efa7ccf546d1124a9b6467d57ed99019e2e9dd4bd6
- SSDEEP 192:zDKQfExDd3InEk0OIhB5oWB76OLMthk2L7KkNOW128RFlxJPyqqXrbFoQPI:zDKQH0hCWhIkOKioI
- TLSH
  T14FE12E885EF260A49543706D0A9F9202B4B9C143446DEE04FE5CE7D06FE05789BB6FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  Solara/Monaco/fileaccess/node_modules/range-parser/index.js
- Size 2KB
- SHA256 38786526d000475300728db07455aa21d1e37b0f24e48fbc4cb30136ae30b07b
- MD5 e72576333d27d1c9b3901c4b9e597f27
- SHA1 99f605cd5ba471183657fbf318dbc8e5ec82f042
- SHA512 86a0d770c08b7e61dea3f63b12736e11737874d32650f263a3728c01c93027ed305fa80aec05997584e7f6ebe8f78dd0f17c26a1eb5fc4653afab501971fcdda
- TLSH
  T1085122097492211B5B47623482DF6E47747340C7D22CAE80B78EF2902FA563C52BDFE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  Solara/Monaco/fileaccess/node_modules/raw-body/index.js
- Size 7KB
- SHA256 e1c1ff9152ec1f5cf1ef1c2b853d6723e93ba13e4e9f1f15f9c6b2026a39a1cb
- MD5 c7da7dd272deb49b1042a6ad81419d5e
- SHA1 8a4cba78d978452aa8c722f77ab07c0da12b35e1
- SHA512 7083169d33557a58e20573ac46dd0de8e319903bbafbc3618d7cf19af88943253a1c34fc232d58b9a0b52221138dcf3bc67b0d412ee98c306d405f23687b607f
- SSDEEP 192:8ZJAKvoBunmQyMM0y12udG+b4a6tiBtz7XzGIXUXDlp:8ZSKnmDR3dGhE3Y3
- TLSH
  T17CE152946AE961211B83B476C18FFB0971F5E0631A1E2DD174CED3B02F08A7C5572EE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Solara/Monaco/fileaccess/node_modules/safe-buffer/index.js
- Size 1KB
- SHA256 184d5c4a83512e3f49d4d5b52f7073f601f933bad11f1fbb3ad364ca5e6478e1
- MD5 35de14728187b87c9ab687c3bdc37436
- SHA1 94ae42f086b35537cc69d82c0f55c6d59e6b8d98
- SHA512 b2b3ef941a8d76480f519b68cd05ecf0aace617a2c414f3e7d375a59718b06f6e7bf88ef384f3e400642431c296bf400f80048e4ad8efb93860e41d697f337b1
- TLSH
  T19A311E09EEF4204563C336B204EEFD8FF2659029801D8F61A87252B05BF62F1CCE526A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  Solara/Monaco/fileaccess/node_modules/safer-buffer/safer.js
- Size 2KB
- SHA256 37f9716144105051ab302f6a0c30a52ff5de7269b9e1173ac22be798fc11ccad
- MD5 b548fa7365e81d472250949a6b4ccc69
- SHA1 ad919cad501061f663026f382334cc6ce5a8b381
- SHA512 6b3c16541246ddf1bd12c0cf537fc54dd9ed932c70a834d8df57d6758bc9532af554910d4b292f69fa5b3fd0b5f66dce2451eb3f6cf19ba295d1397bcad8a574
- TLSH
  T149410D549EF0901E0BC7305110A9B80FB274D075807F5EE1386D47B85BDADB6ABE1BA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  Solara/Monaco/fileaccess/node_modules/send/index.js
- Size 22KB
- SHA256 9196d51e83c8142b5ca56a4d9a0352db4e6fe0a983d9afeb40f8531fb80455a2
- MD5 638e22792701426da6dcfe743a272762
- SHA1 dd7d90e571e262697a0914ce438cece05ef6f9af
- SHA512 0d232d3831144c806d4815efc18a19dfc1bd33ae618e37fdbb6766b82dec84b6abebf18548c302aaf452545553bfec843af853f7b2daa33f62eb3893ffbdaf91
- SSDEEP 384:XxKaZnHXuj0j+Ax0HSD1iYojlJlJUDirWEbOqWaeOdz5Qq8m3ZeT9ejdhsb9nag6:oO3usrx0frN9b15AcjAUgVjmb
- TLSH
  T125B273542AD531024357A170C4CFA606A665C02B532F9986F5CEE2FA2FCC57886FEEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  Solara/Monaco/fileaccess/node_modules/send/node_modules/ms/index.js
- Size 2KB
- SHA256 e5f0b6a946a9b2b356a28557728410717df54ea2f599edb619f9839df6b7b0e9
- MD5 83c46187ed7b1e33a178f4c531c4ea81
- SHA1 ea869663486f513cc4d1ca8312ed52a165c417fa
- SHA512 51b45089a53a23c12e28eb889396e2fa71b95085baa5ac34d71ffb625131bf2fec3ae98efeae537656e20ea257f44e089bcebc9ad54cf672cde852102e43e153
- TLSH
  T1CE51F2B128E6B201536A5334465ED195A89DBC23330F9EAFBCACD174BF8542181FACE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  Solara/Monaco/fileaccess/node_modules/serve-static/index.js
- Size 4KB
- SHA256 768d6407e86ba974e7b8a0e79625e76a932b1f2503207c87f871fcf98be21b1e
- MD5 3707f8d6ee2c6d88ffab23c0c4f1509b
- SHA1 1245000610229e2f79a8ffa95a40b08242371db0
- SHA512 ccb0ef9f4bef48f16cfcf54322d306ab04920bd1339d3b667269bda092e2b4ce5372add10a683ae9e2a7451df168ceb494667fa2b50ce1dbc1fc468ead6d715c
- SSDEEP 96:U5iiqzjxK4F4PTTMMatmWiuj8GvWbWc3THjefc4WoU:UrqzjxjFYwMaHQGvWicDjkc4WoU
- TLSH
  T18391520839CA70065797EA79D68B5A0A6891C053112EDC93F8AD83A85FD013887E3EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  Solara/Monaco/fileaccess/node_modules/set-function-length/index.js
- Size 1KB
- SHA256 a523e45ae8c58b13795b66841fcaf104ac3e394ab123197bd46dd09088cabcd5
- MD5 3f8df1ed175b6f94bca846b018f56f6d
- SHA1 c983b09e4396b163486378b5b1f7aefc532cb471
- SHA512 4001bd1d845650f0f04401e434e96d8404744c16c45d4df3c0bce46d43dd011b0f07ab45d38af17b1bd37be24c537d466613270479739e1269127ad2c72e439c
- TLSH
  T186211089E794B05B84913120967F640E7934C8B72CC949BF974A607619B4FCC89EDEF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  Solara/Monaco/fileaccess/node_modules/setprototypeof/index.js
- Size 407B
- SHA256 3e3495ca7ae72a7f0ca459f47dd3d97ae3a48fa4b1a669a31672be778cc97a5f
- MD5 0426a4c38b91533c932059bcb80f163d
- SHA1 3f772213640aeba8a4e9acbf5d8b31c91fcbc4b1
- SHA512 3e94a6cff02fbbb296701f979f79b65aefd64c51a7619bd47dca21b7a4361e209aa3d1d5d7d14be86ef61043a1dcda5071959f04fe9194a6adfdfafdcad36432
- TLSH
  T1C3E0AB00EBB024DC5BE690A02009280BFBAC8C4DD0BCDB069E44CBC59E82017179346A
- MD5 SHA1 SHA512 TLSH
Score

6^/10

execution persistence
- Drops desktop.ini file(s)
behavioral10
- Target
  Solara/Monaco/fileaccess/node_modules/side-channel/index.js
- Size 3KB
- SHA256 5bbc044d84799159c43617a29f22ae6dc9437e58ee3d7a0ed247fc7236ebf863
- MD5 ae7485eadf030bac549bd7f2061c1369
- SHA1 d98ab57304f572c0627627df3ac4164755021244
- SHA512 71abb443869bb4d61b7a01f504262b44cfc70e9694ae661f9425c5bd22356eee7ac0673fc0d270d8ff67f100794e49c99e10c87b765454568bd7e26c79712a50
- TLSH
  T1C08110C9F3CEA21782A03093069D51DCBD5CD539586885FAEC79E3B8519C42C8B32FD5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  Solara/Monaco/fileaccess/node_modules/statuses/index.js
- Size 2KB
- SHA256 96a0698e899f5889cf254d1f2e351f3253a37921c7f87269b0e87a497dec666a
- MD5 7c5205330288c271e7582c282e40d21a
- SHA1 d9c8b2f32ded4afcf305665c3369e59718a699e6
- SHA512 688eb30f0d28f165415a1888283b473c403d23ba09aad1c4fef9480d7009a3352648c4c2b7aa2aada6fa08423ce181e98157aac7825a290f74434ea8448f1f5b
- TLSH
  T17B51E14894E834290EA51571B0CFF116ED6C1819512F3B7AECFD43E46F492E6C12EEE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  Solara/Monaco/fileaccess/node_modules/toidentifier/index.js
- Size 504B
- SHA256 f9f26b0e90e2569b61d02ef2a92718624b8854592b1ede7f2c8879a69cfdba05
- MD5 b7a1b5c3f74ff7e0a11b61d56673afa0
- SHA1 fc66e4445021b49b1f4386ca72cad654dc408d34
- SHA512 96163678827f633cbea608af831f018db8577ee22543d6dfd6550a176fe84b4b78550dfb5ecbfe60f1096438b3ce485fbce86288ebdce8b6d90484d7cda079ce
- TLSH
  T1ACF09ECF28D131834787887595DAC16734C8A563A35B90E1B0A9BEE96F3413402B5DDC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  Solara/Monaco/fileaccess/node_modules/type-is/index.js
- Size 5KB
- SHA256 4a94338bd746c6b17dd8681f21124f84ed2cdd4a16022849d28900d5e568642a
- MD5 f9aa3afdc332adae59aa21d31090582d
- SHA1 7b36ddd28b09d31b459e9cbd15476dec2fac3fdb
- SHA512 eb56ecd48a228933ed5bf0055791fee237bda3c609cdf84df021d68ef5922401b18a1c5c9099b0a3a15091beb61c5837a9a847355271cfcaef4cdce00f2be474
- SSDEEP 96:pr6k1rbodiocKqn9rlsI87r34KKBEZdmx3Z4vF25XhPwc72OS0BkHfLZ:prn1rbeiSq9+QKap045XhB7/S0BkHfLZ
- TLSH
  T1CFB173C635C9B0058A0A44B447DEF3C1F968D4172A298D92F0CD76B56F88AB8C1B6FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  Solara/Monaco/fileaccess/node_modules/unpipe/index.js
- Size 1KB
- SHA256 69cd57b5cdd08c42410ebc0d92235e334f1fb985e6eb2dcfb1c692db674411bd
- MD5 377f0c4bddbbd7e73b32a53e687df342
- SHA1 df9106d2019fe2e4bfae9882e4a8be7012eb55cf
- SHA512 bfec0a252c8d2718c6b747e40e6d3acf165c5f797f725e4729e477707aaa04f6904e1b00688dd348ca25fe13adef8e3fc7f0fc8b03877359b5883224107dc0de
- TLSH
  T1CC21ADCC69E8202701C2A3F7A8DF97C8A8C0C213110D1941A6AED7D4BF41C3CA6B8FE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  Solara/Monaco/fileaccess/node_modules/utils-merge/index.js
- Size 381B
- SHA256 ec62860d6445addffd574f640451ea92e0558b6df793b2e0f1c7175fc2ff6366
- MD5 20d03f8bf4486091c44f17a97cbb6c24
- SHA1 77759a680bd22cacb94bdc438ed6250eeb10e50a
- SHA512 e892863627cfc57839d23a8647010a6ab17c7683b827bf07cc6e130f7d937816075ebc83c013d5fbf6c98f65eaef838093e8a2f891a8bd5e9d56937822f63ef5
- TLSH
  T192E0689049A2B047F087A1F090F5F086F54D004330AFD98D374CFEF48F809A185E0C89
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  Solara/Monaco/fileaccess/node_modules/vary/index.js
- Size 2KB
- SHA256 8e40311960636d40473c57e335bbca115036766bf150df296b941256432ab410
- MD5 8217c2d942ee5bf6866c92662515d975
- SHA1 0e3f2e39b49663eb93e911c9f9c96d2c843d85da
- SHA512 3ef722d37b016c63ac0126cfdcecb6d7140619d0cf4995898c0bbd9707951581527a6dcb78ac35e948c26fca53b8a199cf5a28e8f41821f0d5b617db54babd41
- TLSH
  T198516308A9E131461F8214B0D54FDD0263B8C20365049C56FAEF96AFBFD88A1B596FF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  Solara/Monaco/index.html
- Size 14KB
- SHA256 e0f556c791d604813a2552e4dd5af9779875563561c5bc5824b4c0bd51313ba3
- MD5 126a540e637b97ba0f8abb694c5ab47e
- SHA1 90530889b3a95f7c2058adc4120917b8b9498a9e
- SHA512 b71054585ff453b07b5d677aa1988de8dd2392d159aea8745b8c98ee1ecab26f5b80e9fed551f9f7e48e41163b4da395b001423396df2baccb0be20ba939363e
- SSDEEP 384:ttTeSQmfElKnihKRA5L1t2bVBJjjgOtu3BX+BILnoamLF:yGihVt2bVBJ70xOyboamLF
- TLSH
  T1B162CAB9B34F100B1282534974F67598FE2DC531C2235AAEB2EAF230D5DD8AC435A6F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral18
- Target
  Solara/Monaco/vs/basic-languages/lua/lua.js
- Size 5KB
- SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
- MD5 8706d861294e09a1f2f7e63d19e5fcb7
- SHA1 fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23
- SHA512 1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f
- SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE
- TLSH
  T11CB11ED89C9951594AE1E766879EE0A6E1544203CC3C7D74B7EC438C4F8CA4C86BE73D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  Solara/Monaco/vs/editor/editor.main.js
- Size 2.0MB
- SHA256 93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18
- MD5 9399a8eaa741d04b0ae6566a5ebb8106
- SHA1 5646a9d35b773d784ad914417ed861c5cba45e31
- SHA512 d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8
- SSDEEP 24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f
- TLSH
  T12A95E7997155342243C7A0B6A47F050FB33A54ADE80A406CB7B8D8ED2DBE5896337F78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  Solara/Monaco/vs/editor/editor.main.nls.js
- Size 31KB
- SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
- MD5 74dd2381ddbb5af80ce28aefed3068fc
- SHA1 0996dc91842ab20387e08a46f3807a3f77958902
- SHA512 8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e
- SSDEEP 384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb
- TLSH
  T153E2B767A78813372A8302DBB2DED194BB1A597D7351034678AD943832C64F0A3BF9F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  Solara/Monaco/vs/loader.js
- Size 27KB
- SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
- MD5 8a3086f6c6298f986bda09080dd003b1
- SHA1 8c7d41c586bfa015fb5cc50a2fdc547711b57c3c
- SHA512 9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017
- SSDEEP 768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI
- TLSH
  T17DD294CEBB9474234247F8E8D43F001BE2B6955E544D842C710DD8EE5CB998AA23EF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  Solara/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Solara/SLaunch.exe
- Size 245KB
- SHA256 fe4e2de98a58a3d67785c9ae2343ba34f3207a2a77fe21c88c1a5488acc02d22
- MD5 a05992c20a823307544a9840a8ffed4d
- SHA1 e85cda936c5ce601da7d57e547751be93aaf5ad4
- SHA512 338ed0c985f36f72fe2411f66d4e75465b7743373d9e292bef33f89f753584e379ba957af1c62ddca95d385255f44f274f069fe7a2e2b6f7b23303361097abee
- SSDEEP 3072:bNwrkXnZkTZfGK3uhMhXktRo8LeReUZqCZKl1Q:BJ8ZgyiLTEmQ
- TLSH
  T18A349F13A6EC3CEAD03A8730B77747C0DB2EEC655391D58E42D006A68A7E5937E267D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Solara/Solara.exe
- Size 1.3MB
- SHA256 473032c443307738fa01a2dc1d636c81f7b2def5d48d0dde91b0b896230bc83b
- MD5 312746de805dc64b1ab7fcf9f4c0f1ec
- SHA1 23f28f0abc2227177f8fce565c02ec2f50ec744b
- SHA512 85e17706968dfa10148060957a4098df6ba91b73d6f148255352838792dcd4102bcd1ce0aaeb321c429bae816f36e6ee16549c6105ee8495cbd54c6e68f697cf
- SSDEEP 24576:kVyuDb36T6hkReLXUJWpQ+NGkIAm1/Q3QQl:kAjkIAm1W
- TLSH
  T17455E242A2C6FD1BD3362A358594F32D89257F31EEA6930B30BD35AC553BBAD8449343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery spyware trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral25
- Target
  Solara/SolaraV3.dll
- Size 14.1MB
- SHA256 81771dcab3ab3faf19852e2d41d5bbee958f7b169f38d3f41693c22ec69b6696
- MD5 c2b86900af7873fad083c12a93b3b26c
- SHA1 5fa36550b06a6c69a46ff3eb4046e9340c105674
- SHA512 988dbab6802a42865c63719b8995e77a72a2edc615d8932446efe0ce0b622a24e3d645ba85b3783aa69d82565360eec877096ae04c73e4a3f0c51720f7cd7d17
- SSDEEP 393216:Z54DjaoXoLMS+Lwd8ZyuWdB+L2bfDCcheoKbsv:ZmaoXoLMScCd1
- TLSH
  T1F0E68EE624D9119CD46AC6BDC353EA3BC66F74390334D6E71664A6620F23ED0367AF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral26
- Target
  Solara/WebView2Loader.dll
- Size 133KB
- SHA256 79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36
- MD5 a0bd0d1a66e7c7f1d97aedecdafb933f
- SHA1 dd109ac34beb8289030e4ec0a026297b793f64a3
- SHA512 2a50ae5c7234a44b29f82ebc2e3cfed37bf69294eb00b2dc8905c61259975b2f3a059c67aeab862f002752454d195f7191d9b82b056f6ef22d6e1b0bb3673d50
- SSDEEP 3072:e5i6Uab3sFhPk6vEmG1PU6dLXm2ng3esQDqEt2JljdTu:e5P2e6vERtUyTmHEtmI
- TLSH
  T13FD35B5B73A5007BE1778174C4A34A1AEB76B85117609BDF07A442692F63BD0AE3EF30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Solara/Wpf.Ui.Abstractions.dll
- Size 16KB
- SHA256 97d4870a394bc0f916c1e347fedc44fca5c623ce771ae7d57d6850cff05a7421
- MD5 f2e21fd54226495bf3094bb7a3b317ed
- SHA1 e4446ddee38178e96b6b185dcba7b7100398b882
- SHA512 bd50cc6dc257441e0b74b7868b4011b050adb290a7bc2a4def51f29c8244617f59e8c9c3b5faf11089f5bfe9e86337c7064479ab314f12552a63a3e824e54350
- SSDEEP 192:HWJTHp66tO7Qg/RRbf/KDDwHXvMnA+BRVGA1DmgIH1uokrGF7Fb4YRmtZX+iS6q5:29I/RRb/KDDwH/B+3DgUv0JHb7
- TLSH
  T11772076ED36C53B3DF6B06B0F83A21511A76E24C3603E6BF5648D54A4F5AB890432772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Solara/Wpf.Ui.dll
- Size 5.7MB
- SHA256 0ebff5461eb1984ea852566a59f08456e48909f4ea9b7ec064a219a28ece0343
- MD5 1aa1a40418717dc04ada47b52a1c06ed
- SHA1 4efd1787373497fe819116e2c0e81e2463cc1052
- SHA512 14d632d1dbf77d4a11d21c2314a07faeaebbce3f257e36d79c63becc29b16cacd09e8b7928d79742c1ef346576134c589ece3af8d80e49def36b865cdd9b7ca8
- SSDEEP 98304:1OYON/XzMvSmaRT+KcbNdvPp4zlAHDfyNr7lQ:/O9oNdvPpR
- TLSH
  T1BE565B9E23ED0D33D363837A8DA07323196919652142AF878F4ADB2D44BA0C5DDF16DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Solara/vcruntime140.dll
- Size 99KB
- SHA256 7d7ca28235fba5603a7f40514a552ac7efaa67a5d5792bb06273916aa8565c5f
- MD5 7a2b8cfcd543f6e4ebca43162b67d610
- SHA1 c1c45a326249bf0ccd2be2fbd412f1a62fb67024
- SHA512 e38304fb9c5af855c1134f542adf72cde159fab64385533eafa5bb6e374f19b5a29c0cb5516fc5da5c0b5ac47c2f6420792e0ac8ddff11e749832a7b7f3eb5c8
- SSDEEP 1536:sC6b39cL/iRDhXq4GZLAy10i5XNC83tTPw98APXbxecbSQ25I4I/Cq:sVPphXq30yvXL5APbxecbSDu
- TLSH
  T118A35B4AB6A842B7D16AC170C0F35A47EB72B485873053CF03B98AA90F57BE15E3E355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Solara/zlib.dll
- Size 663KB
- SHA256 57d27814f4d95618584d26c8e37418b9dfe3f28423de6265f4c17de7948e69b9
- MD5 c5b29a2e334961e9dee00ab4726392e3
- SHA1 8f2043d03d0ff96a27cfce297f594afa87e79f2e
- SHA512 0393b0506ada43f7f7978c2f81da62521b3c0a43d04242676002da755bc51ea144047891b6ff3796e89b4079360ffb245793fed67e3741b4c3884cd48973a63f
- SSDEEP 12288:v0QF8ngPoGTct1aGQBJ4yysYZ22yViIwhOQF/tU/yfcqit5cJGBTcW14O/:vifUsyurO3cYTcS/
- TLSH
  T10BE40856D1F8CA96EE719135C2972E2EF3E4BD05137193539344466EBEA3B809B3B380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Solara/zlib1.dll
- Size 113KB
- SHA256 945e7f5d09938b7769a4e68f4ef01406e5af9f40db952cba05ddb3431dd1911b
- MD5 75365924730b0b2c1a6ee9028ef07685
- SHA1 a10687c37deb2ce5422140b541a64ac15534250f
- SHA512 c1e31c18903e657203ae847c9af601b1eb38efa95cb5fa7c1b75f84a2cba9023d08f1315c9bb2d59b53256dfdb3bac89930252138475491b21749471adc129a1
- SSDEEP 3072:wsuxy/bjdeT1dtDCV8SSsfj7cTpHTBfQjxcHE2Fl:wsZ/bRe5PDCV8SLfcFTBIjxyE2Fl
- TLSH
  T11BB37B66F6A365EDC6B6817091EB5775F435F8210330AEBF6288E7701B12E506B0C2ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Network Share Discovery

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32